Vulnerability GO-2026-6917
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 hours ago
November 05, 2026 at 11:49 PM UTC
LXD allows cross-guest volume hijack via DevLXD device patch in github.com/canonical/lxd
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d
Summary
LXD allows cross-guest volume hijack via DevLXD device patch in github.com/canonical/lxd
Details
LXD allows cross-guest volume hijack via DevLXD device patch in github.com/canonical/lxd
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
14 hours ago
lxd allows Cross-guest volume hijack via DevLXD device patch
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d GHSA-hhf9-qw4v-72xp
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d GHSA-hhf9-qw4v-72xp
Unknown
2 months ago
Type field in restricted TLS certificate allows privilege escalation in github.com/canonical/lxd
* GO-2026-5306
* GO-2026-5306
Unknown
2 months ago
VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf in github.com/canonical/lxd
>=0.0.0-20210305023314-538ac3df036e GO-2026-5368
>=0.0.0-20210305023314-538ac3df036e GO-2026-5368
Unknown
2 months ago
LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd
>=0.0.0-20210305023314-538ac3df036e GO-2026-5576
>=0.0.0-20210305023314-538ac3df036e GO-2026-5576
Critical
6 months ago
LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf
>=0.0.0-20210305023314-538ac3df036e <=0.0.0-20260226085519-736f34afb267 GHSA-fm2x-c5qw-4h6f
>=0.0.0-20210305023314-538ac3df036e <=0.0.0-20260226085519-736f34afb267 GHSA-fm2x-c5qw-4h6f
Impacted packages
Timeline
Published
8 hours ago
November 05, 2026 at 11:49 PM UTC
Last Modified
7 hours ago
November 06, 2026 at 12:15 AM UTC